Justin M. Keyes 799cbfff85 fix(vim.secure): read() command injection vulnerability #39918 ...

Problem:
Malicious filename can execute code because of ":" cmdline expansion.

Solution:
Use `fnameescape()`.

fix https://github.com/neovim/neovim/issues/39914

2026-05-20 15:27:43 -04:00

..

api_spec.lua

refactor(test): drop deprecated exc_exec #39242

2026-04-20 14:16:41 -04:00

base64_spec.lua

test: improve test conventions

2024-04-23 18:17:04 +02:00

buffer_updates_spec.lua

refactor: update usages of deprecated "buffer" param #39089

2026-04-15 18:45:26 +00:00

command_line_completion_spec.lua

test: don't run test cases directly in describe() (#37915)

2026-02-17 11:34:12 +08:00

commands_spec.lua

refactor(test): drop deprecated exc_exec #39242

2026-04-20 14:16:41 -04:00

comment_spec.lua

test(treesitter): coverage for comments with combined injections (#33975)

2025-05-29 12:10:07 +02:00

deprecated_spec.lua

test: failing "treesitter.get_parser() returns nil for >= 0.12"

2026-03-29 18:50:37 +02:00

diagnostic_spec.lua

fix(diagnostic): handle signs = false in status() (#39703)

2026-05-09 17:59:21 -07:00

ffi_spec.lua

fix(tui): log chdir failure properly #37591

2026-01-28 05:44:17 -05:00

filetype_spec.lua

fix(vim.filetype): match() fails if g:ft_ignore_pat is not defined #39158

2026-04-18 06:50:28 -04:00

fs_spec.lua

test(vim.fs): basename(), dirname() trim trailing slashes #39790

2026-05-14 16:02:31 -04:00

func_memoize_spec.lua

docs: misc #31867

2025-01-09 09:26:45 -08:00

glob_spec.lua

fix(glob): handle numeric literals in pattern matching (#37257)

2026-01-12 10:58:01 -08:00

hl_spec.lua

feat(vim.hl): vim.hl.hl_op() #39777

2026-05-17 09:56:37 -04:00

inspector_spec.lua

fix(lua): ensure inspect_pos() only shows visible highlight extmarks

2025-03-18 09:39:19 +01:00

iter_spec.lua

feat(iter): peek(), skip(predicate) for non-list iterators #37604

2026-02-12 11:55:16 -05:00

json_spec.lua

feat(stdlib): vim.json.decode() can allow comments #37795

2026-02-11 06:54:57 -05:00

list_spec.lua

perf(lua): memoize key_fn results #39568

2026-05-05 17:04:11 -04:00

loader_spec.lua

fix(lua): remove vim.loader.disable() #31344

2024-11-26 06:15:50 -08:00

log_spec.lua

feat(logging): vim.log #38906

2026-05-10 11:03:15 -04:00

luaeval_spec.lua

refactor(test): drop deprecated exc_exec #39242

2026-04-20 14:16:41 -04:00

mpack_spec.lua

fix(mpack): boundary values for negative integer encoding #37255

2026-03-21 17:07:33 -04:00

net_spec.lua

fix(vim.net): unreliable integration tests #39594

2026-05-05 16:26:59 -04:00

option_and_var_spec.lua

fix(options): vim.opt fails for 'fillchars' #37141

2026-03-18 19:19:47 -04:00

overrides_spec.lua

feat(messages): cleanup Lua error messages

2025-05-04 11:22:57 -04:00

pos_spec.lua

refactor(pos,range): extract vim.pos._util

2026-05-20 16:23:03 +08:00

range_spec.lua

refactor(pos,range): extract vim.pos._util

2026-05-20 16:23:03 +08:00

secure_spec.lua

fix(vim.secure): read() command injection vulnerability #39918

2026-05-20 15:27:43 -04:00

snippet_spec.lua

fix(snippet): cancel session on <Esc> in Select mode #39238

2026-05-10 09:19:12 -04:00

spell_spec.lua

test: improve test conventions

2024-04-23 18:17:04 +02:00

ssh_spec.lua

feat(ssh): SSH configuration parser #35027

2025-08-17 20:40:28 -07:00

system_spec.lua

fix(vim.system): use REAL PIPES for vim.system, similar to jobs

2026-04-30 12:22:57 +02:00

text_spec.lua

refactor(test): drop deprecated exc_exec #39242

2026-04-20 14:16:41 -04:00

thread_spec.lua

fix(lua): vim.diff is nil in uv.new_work() thread #34909

2025-07-12 20:54:22 -07:00

time_spec.lua

feat(excmd): add :uptime command #39331

2026-04-23 17:11:59 -04:00

ui_event_spec.lua

fix(normal): crash using :norm from vim.ui_attach shell message event #38283

2026-03-13 09:36:44 -04:00

ui_select_spec.lua

fix(ui): z=, tselect with async vim.ui.select

2026-04-30 19:19:42 +02:00

ui_spec.lua

feat(ui): use vim.ui.select for :tselect, z= #39478

2026-04-28 18:29:17 -04:00

uri_spec.lua

fix(tui): log chdir failure properly #37591

2026-01-28 05:44:17 -05:00

uv_spec.lua

feat(messages): cleanup Lua error messages

2025-05-04 11:22:57 -04:00

version_spec.lua

feat(vim.version): add __eq to vim.VersionRange #38881

2026-04-08 13:33:00 -04:00

vim_spec.lua

refactor: group nvim_buf_call, nvim_win_call tests #39828

2026-05-17 11:20:54 -04:00

watch_spec.lua

test: fix s390x failures

2026-03-29 13:36:56 +02:00

with_spec.lua

fix(lua): make vim._with() work with buf=0 and win=0 context #39151

2026-04-18 12:04:28 -04:00

xdiff_spec.lua

build(ci): bump zig to 0.15.1 and add more platforms

2025-09-15 12:10:23 +02:00